Critical · 9.3 CVE-2026-109698 EUVD-2026-102028GHSA-hm79-79jw-89mp

WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerability

Published Oct 15, 2026 · Updated Oct 15, 2026 · Assigned by Patchstack

Vendor: kitae-park Product: Mang Board WP

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Kitae Park Mang Board WP mangboard allows SQL Injection.This issue affects Mang Board WP: from n/a through 2.4.4.

Affected products

Vendor	Product	Affected	Fixed
Kitae Park	Mang Board WP	≤ 2.4.4	—

References

https://patchstack.com/database/wordpress/plugin/mangboard/vulnerability/wordpress-mang-board-wp-plugin-2-4-4-sql-injection-vulnerability?_s_id=cve vdb-entry